Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/1a3bb93f-98a4-4c7e-a0e1-8057a4f086c9/0/3139392e31392e37372e302f32342d3234203d3e20323033363632.roa
File: 3139392e31392e37372e302f32342d3234203d3e20323033363632.roa (raw, json)
Hash identifier: l2HPQvLJSPVFvMyqlSCDXuZG7szwKCK77eursvFgVGs=
Subject key identifier: 92:FD:61:30:30:23:BD:0B:51:C8:8F:9C:36:25:1E:75:DF:DE:D2:7D
Certificate issuer: /CN=3134ee987e08d8b5583feef621a03150c4f35434
Certificate serial: 5F66DE7041E8E8EAD8467D2BD6767D6F57B44C2F
Authority key identifier: 31:34:EE:98:7E:08:D8:B5:58:3F:EE:F6:21:A0:31:50:C4:F3:54:34
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MTTumH4I2LVYP-72IaAxUMTzVDQ.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/1a3bb93f-98a4-4c7e-a0e1-8057a4f086c9/0/3139392e31392e37372e302f32342d3234203d3e20323033363632.roa
Signing time: Fri 28 Aug 2026 18:41:42 +0000
ROA not before: Fri 28 Aug 2026 18:36:42 +0000
ROA not after: Fri 27 Aug 2027 18:41:42 +0000
asID: 203662
IP address blocks: 199.19.77.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/1a3bb93f-98a4-4c7e-a0e1-8057a4f086c9/0/3134EE987E08D8B5583FEEF621A03150C4F35434.crl
rsync://rsync.paas.rpki.ripe.net/repository/1a3bb93f-98a4-4c7e-a0e1-8057a4f086c9/0/3134EE987E08D8B5583FEEF621A03150C4F35434.mft
rsync://rpki.ripe.net/repository/DEFAULT/MTTumH4I2LVYP-72IaAxUMTzVDQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 20:21:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5f:66:de:70:41:e8:e8:ea:d8:46:7d:2b:d6:76:7d:6f:57:b4:4c:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3134ee987e08d8b5583feef621a03150c4f35434
Validity
Not Before: Aug 28 18:36:42 2026 GMT
Not After : Aug 27 18:41:42 2027 GMT
Subject: CN=92FD61303023BD0B51C88F9C36251E75DFDED27D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:f1:23:45:a1:36:5c:5c:ff:68:9e:96:8e:ea:
6a:3b:22:93:18:4b:2a:bd:22:be:53:76:bc:13:60:
0f:28:97:ad:1a:5c:ae:08:5a:2a:47:5d:a5:20:75:
cf:eb:41:36:b3:c8:ef:56:55:03:4e:69:6f:8a:29:
bd:7b:3a:d6:6d:49:37:91:7c:ca:aa:6d:a5:26:3b:
b0:a4:14:cc:cc:1e:e9:74:34:17:08:4d:09:63:e7:
3a:23:cb:94:6b:1d:1b:86:96:6d:65:c8:ea:94:35:
8f:35:f5:42:9d:72:3e:f0:1f:59:e9:40:c2:e4:73:
0b:f3:a3:e4:8f:9c:16:ed:b1:a4:11:7d:50:e9:b0:
9d:d8:18:8c:e7:2b:b4:d9:9c:77:7c:bf:04:24:2f:
21:86:0e:bb:5e:8b:6a:d0:e9:b2:e1:bd:9e:62:34:
4f:e3:8b:e3:7d:85:52:69:42:5b:22:86:55:51:94:
93:db:f1:22:fa:1c:ce:57:e4:91:f9:6c:a3:eb:8c:
23:ea:58:ca:f7:32:ea:4e:d9:c0:ef:21:c7:eb:dc:
90:d0:aa:d9:5e:9d:02:7c:55:11:ac:22:98:56:35:
92:61:9c:c5:ad:c3:ed:48:3d:6b:d4:b7:b8:66:38:
c2:d6:2c:6a:4e:5f:5d:0f:ee:d8:38:e6:c6:43:7b:
79:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:FD:61:30:30:23:BD:0B:51:C8:8F:9C:36:25:1E:75:DF:DE:D2:7D
X509v3 Authority Key Identifier:
keyid:31:34:EE:98:7E:08:D8:B5:58:3F:EE:F6:21:A0:31:50:C4:F3:54:34
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/1a3bb93f-98a4-4c7e-a0e1-8057a4f086c9/0/3134EE987E08D8B5583FEEF621A03150C4F35434.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MTTumH4I2LVYP-72IaAxUMTzVDQ.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/1a3bb93f-98a4-4c7e-a0e1-8057a4f086c9/0/3139392e31392e37372e302f32342d3234203d3e20323033363632.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.19.77.0/24
Signature Algorithm: sha256WithRSAEncryption
00:68:3e:2d:e1:26:db:bd:0a:19:a1:28:2c:8e:c9:42:f4:aa:
44:36:9b:d1:a6:77:f0:d0:50:04:bd:bf:7d:80:24:e5:b8:a3:
c9:d8:8d:df:e8:08:dc:ea:ad:91:e2:46:3f:87:59:37:93:a3:
9d:e1:c2:c7:ae:88:d9:22:36:04:ab:ac:a0:58:8f:ab:d0:59:
78:fb:1b:c7:9a:db:1b:ff:c1:91:03:c7:94:cf:4e:4b:9c:1c:
5c:8a:12:70:03:65:ff:a5:20:04:19:07:54:75:ab:fe:5a:91:
18:c3:a9:7b:e3:7c:cf:4e:29:94:c6:58:7a:00:19:10:d8:18:
75:1d:f2:b1:92:85:f8:61:d4:fa:b0:2d:06:71:0f:48:8f:a0:
0f:37:9c:8d:bc:88:82:be:0f:fb:a8:28:92:25:05:7f:e5:bf:
84:5f:31:14:f1:ed:c5:d9:30:fa:2a:fe:97:a9:5f:c1:08:76:
aa:df:44:b4:e1:41:96:7d:7f:0c:fb:3d:30:e3:64:60:1c:19:
0f:7a:16:a3:54:ac:cf:38:12:61:4b:08:5b:03:91:ca:81:71:
93:54:e7:0e:84:ec:b2:23:ca:95:08:0e:f0:47:8c:40:61:4c:
03:77:aa:5d:1f:09:cf:e4:be:78:ae:3b:0b:81:c4:33:11:e1:
70:ce:4c:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 06:20:30 2026 by rpki-client